Detection by Endpoint Security alerts

[vanroy 0]

On 2/8/2021 at 4:16 PM, Lockbits said:

Hello guys,

I've two suggestions:

1) The option to apply exclusions for web control detections or "Detected by ESET Endpoint Security product" alerts. We've a customer that is using web control and we configured the product so all blocked websites are logged in EPC console setting the verbosity accordingly. The problem is that this information is also sent to EEI console and this add a ton of unnecessary data and difficult the detection of valuable data. We can disable the verbose level but this will also affect the blocked website being logged and reported to ESMC.

I mean this:

 

Hello, 

How have you resolved this?

"Detected by ESET Endpoint Security product" alerts

 

best.

[vanroy 0]

21 hours ago, vanroy said:

Hello,  

How have you resolved this?

"Detected by ESET Endpoint Security product" alerts

 

best.

hello @JamesR

[Lockbits 10]

21 hours ago, vanroy said:

Hello, 

How have you resolved this?

"Detected by ESET Endpoint Security product" alerts

 

best.

Hi,

You can change this behavior in EP. You can modify the policy of web control in EP and regarding the category or URL you're blocking, set the severity to always:

[vanroy 0]

Hello @Lockbits@JamesR

Thanks, 

 Some other tips for optimization or make exclusion and rules. 

it's very appreciated.

 

Best